Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier: bUZlO9jr3uBz0UjTFR4m67oHHjJ34d+j9+dixcQSDvM=
Subject key identifier: 96:7C:B7:D8:7F:9E:E0:02:22:D0:C4:CD:3F:03:0A:06:5A:0E:B0:62
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 0198D5BC3D3CB64D90684C172720F5C8EA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number: 06BB
Signing time: Sat 23 Aug 2025 07:02:20 +0000
Manifest this update: Sat 23 Aug 2025 07:02:20 +0000
Manifest next update: Sun 24 Aug 2025 07:02:20 +0000
Files and hashes: 1: 0FvyRdwuNrCgMP49Gm05_Jf24wo.roa (hash: VrNtxHJD5r4AAcIekiYzDFEjX0OLNvQVaPqP96ejauo=)
2: XJdcwddEgs-q78gmSagWMovn85I.roa (hash: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=)
3: eRE1hc1OAUXn9B2yIqa6q1KtEng.roa (hash: 2kkOJHVByX9Ad1TRTPwMrwhabgTLNmB9YR0YC04Cis4=)
4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: hAHsOY9iSV3WdRZlUbmMUZTFjiaIqGeSE8sv+1tyvAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3d:3c:b6:4d:90:68:4c:17:27:20:f5:c8:ea:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Aug 23 07:02:20 2025 GMT
Not After : Aug 24 07:02:20 2025 GMT
Subject: CN=967cb7d87f9ee00222d0c4cd3f030a065a0eb062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:0b:0a:aa:e3:1f:4d:a6:4b:e0:57:09:bc:
4f:0d:c2:49:f1:d9:a0:ef:14:57:33:99:ca:1b:64:
15:18:aa:74:01:c8:bc:a6:7b:28:0c:78:85:19:0e:
1f:72:10:bb:bf:69:cf:f4:c2:1d:f8:48:73:a2:4a:
60:7a:fa:9b:d0:9c:f6:90:db:4f:8e:6b:c6:96:2d:
41:04:29:56:00:0c:3c:c2:0e:8d:9c:04:c3:d7:60:
56:71:78:a9:d1:6b:ac:b9:5c:5e:fa:be:47:84:93:
ce:85:0d:bf:74:92:16:29:80:55:bb:74:84:52:46:
54:e8:e2:11:1d:12:9b:60:29:59:5d:4d:71:fa:d8:
aa:ec:b4:1a:d6:f8:b5:bc:b6:30:8e:cf:43:1a:f5:
59:f5:b5:b6:39:5c:e9:c3:a5:75:30:d2:2a:d9:5e:
01:c4:7f:c7:20:1f:9c:87:d9:3a:b0:91:81:40:25:
d6:9f:90:6a:77:2a:4f:77:57:ee:c2:eb:25:24:0e:
ec:5c:2c:03:37:57:02:d2:c4:0a:dc:5d:c7:2a:cf:
7b:ac:c4:2c:5a:19:c2:1c:f7:4a:b0:9b:2f:bd:66:
d6:0f:47:71:30:a2:f4:ef:4f:f6:49:0a:e4:64:05:
32:64:18:a8:44:5f:f1:83:22:d5:11:d3:3c:4f:67:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7C:B7:D8:7F:9E:E0:02:22:D0:C4:CD:3F:03:0A:06:5A:0E:B0:62
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ab:14:57:e1:fb:c9:4d:06:05:de:43:24:6c:68:1f:02:d5:
2b:ed:94:73:cd:a1:bd:8d:37:8d:52:03:9e:15:ed:58:77:19:
28:02:ca:d4:cf:9e:5e:1f:67:aa:1a:d9:5f:fa:7e:88:40:f1:
0f:d2:d5:64:5a:29:ac:72:7f:13:58:2e:d5:60:b2:2b:2f:a9:
d3:f1:d7:a1:12:1c:90:00:1b:dd:e3:5d:ce:14:07:29:79:5c:
39:92:c0:b3:86:08:5c:77:d0:9d:4a:7e:15:ed:ff:cd:e9:83:
4b:50:60:00:6a:56:80:53:63:59:51:53:aa:73:f7:b3:61:b8:
95:d8:78:cc:a4:ff:0d:5f:9b:ad:a3:da:4a:05:c8:d9:ce:de:
dc:9e:1b:3b:91:91:ea:1b:2c:e4:0c:33:21:11:de:34:c9:e2:
59:85:c0:1c:11:54:6e:a0:7f:87:bb:bb:8a:13:72:f3:2e:8c:
af:24:d3:71:59:37:73:56:fb:94:e9:10:98:0d:6d:17:51:4a:
99:64:0d:40:e1:9c:f5:91:c0:94:f1:19:ee:e5:3a:ba:60:50:
17:51:58:6c:6e:17:ea:af:db:a3:18:5f:1c:e2:f0:17:28:9a:
9e:ba:05:2c:c7:74:78:75:5a:66:65:98:90:b2:12:c7:f5:bf:
61:07:6a:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvD08tk2QaEwXJyD1yOoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNjBmMDA5N2JlNDgxYzIxYmIxZDUxYzg1ZDQ0ZjY1NzQx
NThhYTkwHhcNMjUwODIzMDcwMjIwWhcNMjUwODI0MDcwMjIwWjAzMTEwLwYDVQQD
Eyg5NjdjYjdkODdmOWVlMDAyMjJkMGM0Y2QzZjAzMGEwNjVhMGViMDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8ELCqrjH02mS+BXCbxPDcJJ8dmg
7xRXM5nKG2QVGKp0Aci8pnsoDHiFGQ4fchC7v2nP9MId+Ehzokpgevqb0Jz2kNtP
jmvGli1BBClWAAw8wg6NnATD12BWcXip0WusuVxe+r5HhJPOhQ2/dJIWKYBVu3SE
UkZU6OIRHRKbYClZXU1x+tiq7LQa1vi1vLYwjs9DGvVZ9bW2OVzpw6V1MNIq2V4B
xH/HIB+ch9k6sJGBQCXWn5BqdypPd1fuwuslJA7sXCwDN1cC0sQK3F3HKs97rMQs
WhnCHPdKsJsvvWbWD0dxMKL070/2SQrkZAUyZBioRF/xgyLVEdM8T2eeKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ8t9h/nuACItDEzT8DCgZaDrBiMB8GA1UdIwQY
MBaAFLNg8Al75IHCG7HVHIXUT2V0FYqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYt
NWEzNjEyMzUyYjM3LzEvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYtNWEzNjEyMzUyYjM3
LzEvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqsUV+H7
yU0GBd5DJGxoHwLVK+2Uc82hvY03jVIDnhXtWHcZKALK1M+eXh9nqhrZX/p+iEDx
D9LVZFoprHJ/E1gu1WCyKy+p0/HXoRIckAAb3eNdzhQHKXlcOZLAs4YIXHfQnUp+
Fe3/zemDS1BgAGpWgFNjWVFTqnP3s2G4ldh4zKT/DV+braPaSgXI2c7e3J4bO5GR
6hss5AwzIRHeNMniWYXAHBFUbqB/h7u7ihNy8y6MryTTcVk3c1b7lOkQmA1tF1FK
mWQNQOGc9ZHAlPEZ7uU6umBQF1FYbG4X6q/boxhfHOLwFyianroFLMd0eHVaZmWY
kLISx/W/YQdqXA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:15 2025 by rpki-client